VDB
ALPINE-CVE-2019-8322
ALPINE-CVE-2019-8322
PUBLISHED
CVSS 7.5 HIGH
An issue was discovered in RubyGems 2.6 and later through 3.0.2. The gem owner command outputs the contents of the API response directly to stdout. Therefore, if the response is crafted, escape sequence injection may occur.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.9 | ruby | 2.2.1-r0, 2.1.5-r1, 2.1.5-r0 |
| Alpine:v3.8 | ruby | 2.0.0, 1.8.7_p160-r3, 1.8.7_p174-r0 |
| Alpine:v3.6 | ruby | 2.4.5-r0, 2.4.4-r0, 2.4.3-r0 |
| Alpine:v3.7 | ruby | 0, 1.8.7_p160-r2, 1.8.7_p160-r3 |
Timeline
- Jun 17, 2019 CVE Published
- Nov 19, 2025 CVE Updated
- Apr 30, 2026 Distribution Patch